Lucene search
+L
SageEasypay

1 matches found

CVE
CVE
added 2020/10/18 6:55 p.m.52 views

CVE-2020-13893

CVE-2020-13893 affects Sage EasyPay 10.7.5.10 with multiple stored XSS vulnerabilities. The issue arises from handling Unicode Transformations (Best-fit Mapping), enabling authenticated attackers to inject arbitrary web script or HTML via multiple parameters, demonstrated by full-width variants o...

5.4CVSS5.2AI score0.00532EPSS
Save